diff options
| author | Pierre Bourdon <delroth@gmail.com> | 2019-01-11 12:32:53 +0100 |
|---|---|---|
| committer | Pierre Bourdon <delroth@gmail.com> | 2019-01-11 12:35:16 +0100 |
| commit | 1b9bf8fa7559d1bbf030f3fe3513d25eada65a41 (patch) | |
| tree | c9631799b47cb78c9a2581c9121ed70b46baf613 /pkgs/os-specific/linux/kernel/randstruct-provide-seed.patch | |
| parent | e9b34b1bfa30a51d3ca80bf87f371145a8b4e88c (diff) | |
| download | nixpkgs-1b9bf8fa7559d1bbf030f3fe3513d25eada65a41.tar nixpkgs-1b9bf8fa7559d1bbf030f3fe3513d25eada65a41.tar.gz nixpkgs-1b9bf8fa7559d1bbf030f3fe3513d25eada65a41.tar.bz2 nixpkgs-1b9bf8fa7559d1bbf030f3fe3513d25eada65a41.tar.lz nixpkgs-1b9bf8fa7559d1bbf030f3fe3513d25eada65a41.tar.xz nixpkgs-1b9bf8fa7559d1bbf030f3fe3513d25eada65a41.tar.zst nixpkgs-1b9bf8fa7559d1bbf030f3fe3513d25eada65a41.zip | |
kernel: make the RANDSTRUCT seed deterministic
Diffstat (limited to 'pkgs/os-specific/linux/kernel/randstruct-provide-seed.patch')
| -rw-r--r-- | pkgs/os-specific/linux/kernel/randstruct-provide-seed.patch | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/pkgs/os-specific/linux/kernel/randstruct-provide-seed.patch b/pkgs/os-specific/linux/kernel/randstruct-provide-seed.patch new file mode 100644 index 00000000000..1328b9cee3c --- /dev/null +++ b/pkgs/os-specific/linux/kernel/randstruct-provide-seed.patch @@ -0,0 +1,12 @@ +diff -ru a/scripts/gcc-plugins/gen-random-seed.sh b/scripts/gcc-plugins/gen-random-seed.sh +--- a/scripts/gcc-plugins/gen-random-seed.sh 2019-01-11 11:50:29.228258920 +0100 ++++ b/scripts/gcc-plugins/gen-random-seed.sh 2019-01-11 12:18:33.555902720 +0100 +@@ -2,7 +2,7 @@ + # SPDX-License-Identifier: GPL-2.0 + + if [ ! -f "$1" ]; then +- SEED=`od -A n -t x8 -N 32 /dev/urandom | tr -d ' \n'` ++ SEED="NIXOS_RANDSTRUCT_SEED" + echo "const char *randstruct_seed = \"$SEED\";" > "$1" + HASH=`echo -n "$SEED" | sha256sum | cut -d" " -f1 | tr -d ' \n'` + echo "#define RANDSTRUCT_HASHED_SEED \"$HASH\"" > "$2" |